CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2025-62250: digital experience platform 7.3, 7.4, 2023.q4.0 (+1 more affected versions); +3 more affected products

CVE-2025-62250. CVSS 3.1 base score 6.5 (MEDIUM, NVD). EPSS 0.00174 (percentile 0.06419), scored 17-Oct-2026.

Affected technology

digital experience platform · before 7.3 (exclusive)
liferay

digital experience platform · from 2023.q3.1 (inclusive), before 2023.q3.5 (exclusive)
liferay

digital experience platform · 7.3
liferay

digital experience platform · 7.3 · update fix_pack_1
liferay

digital experience platform · 7.3 · update fix_pack_2
liferay

digital experience platform · 7.3 · update service_pack_1
liferay

digital experience platform · 7.3 · update service_pack_2
liferay

digital experience platform · 7.3 · update service_pack_3
liferay

digital experience platform · 7.3 · update update1
liferay

digital experience platform · 7.3 · update update10
liferay

digital experience platform · 7.3 · update update11
liferay

digital experience platform · 7.3 · update update12
liferay

digital experience platform · 7.3 · update update13
liferay

digital experience platform · 7.3 · update update14
liferay

digital experience platform · 7.3 · update update15
liferay

digital experience platform · 7.3 · update update16
liferay

digital experience platform · 7.3 · update update17
liferay

digital experience platform · 7.3 · update update18
liferay

digital experience platform · 7.3 · update update19
liferay

digital experience platform · 7.3 · update update2
liferay

digital experience platform · 7.3 · update update20
liferay

digital experience platform · 7.3 · update update21
liferay

digital experience platform · 7.3 · update update22
liferay

digital experience platform · 7.3 · update update23
liferay

digital experience platform · 7.3 · update update24
liferay

digital experience platform · 7.3 · update update25
liferay

digital experience platform · 7.3 · update update26
liferay

digital experience platform · 7.3 · update update27
liferay

digital experience platform · 7.3 · update update28
liferay

digital experience platform · 7.3 · update update29
liferay

digital experience platform · 7.3 · update update3
liferay

digital experience platform · 7.3 · update update30
liferay

digital experience platform · 7.3 · update update31
liferay

digital experience platform · 7.3 · update update32
liferay

digital experience platform · 7.3 · update update33
liferay

digital experience platform · 7.3 · update update34
liferay

digital experience platform · 7.3 · update update35
liferay

digital experience platform · 7.3 · update update4
liferay

digital experience platform · 7.3 · update update5
liferay

digital experience platform · 7.3 · update update6
liferay

digital experience platform · 7.3 · update update7
liferay

digital experience platform · 7.3 · update update8
liferay

digital experience platform · 7.3 · update update9
liferay

digital experience platform · 7.4
liferay

digital experience platform · 7.4 · update update1
liferay

digital experience platform · 7.4 · update update10
liferay

digital experience platform · 7.4 · update update11
liferay

digital experience platform · 7.4 · update update12
liferay

digital experience platform · 7.4 · update update13
liferay

digital experience platform · 7.4 · update update14
liferay

digital experience platform · 7.4 · update update15
liferay

digital experience platform · 7.4 · update update16
liferay

digital experience platform · 7.4 · update update17
liferay

digital experience platform · 7.4 · update update18
liferay

digital experience platform · 7.4 · update update19
liferay

digital experience platform · 7.4 · update update2
liferay

digital experience platform · 7.4 · update update20
liferay

digital experience platform · 7.4 · update update21
liferay

digital experience platform · 7.4 · update update22
liferay

digital experience platform · 7.4 · update update23
liferay

digital experience platform · 7.4 · update update24
liferay

digital experience platform · 7.4 · update update25
liferay

digital experience platform · 7.4 · update update26
liferay

digital experience platform · 7.4 · update update27
liferay

digital experience platform · 7.4 · update update28
liferay

digital experience platform · 7.4 · update update29
liferay

digital experience platform · 7.4 · update update3
liferay

digital experience platform · 7.4 · update update30
liferay

digital experience platform · 7.4 · update update31
liferay

digital experience platform · 7.4 · update update32
liferay

digital experience platform · 7.4 · update update33
liferay

digital experience platform · 7.4 · update update34
liferay

digital experience platform · 7.4 · update update35
liferay

digital experience platform · 7.4 · update update36
liferay

digital experience platform · 7.4 · update update37
liferay

digital experience platform · 7.4 · update update38
liferay

digital experience platform · 7.4 · update update39
liferay

digital experience platform · 7.4 · update update4
liferay

digital experience platform · 7.4 · update update40
liferay

digital experience platform · 7.4 · update update41
liferay

digital experience platform · 7.4 · update update42
liferay

digital experience platform · 7.4 · update update43
liferay

digital experience platform · 7.4 · update update44
liferay

digital experience platform · 7.4 · update update45
liferay

digital experience platform · 7.4 · update update46
liferay

digital experience platform · 7.4 · update update47
liferay

digital experience platform · 7.4 · update update48
liferay

digital experience platform · 7.4 · update update49
liferay

digital experience platform · 7.4 · update update5
liferay

digital experience platform · 7.4 · update update50
liferay

digital experience platform · 7.4 · update update51
liferay

digital experience platform · 7.4 · update update52
liferay

digital experience platform · 7.4 · update update53
liferay

digital experience platform · 7.4 · update update54
liferay

digital experience platform · 7.4 · update update55
liferay

digital experience platform · 7.4 · update update56
liferay

digital experience platform · 7.4 · update update57
liferay

digital experience platform · 7.4 · update update58
liferay

digital experience platform · 7.4 · update update59
liferay

digital experience platform · 7.4 · update update6
liferay

digital experience platform · 7.4 · update update60
liferay

digital experience platform · 7.4 · update update61
liferay

digital experience platform · 7.4 · update update62
liferay

digital experience platform · 7.4 · update update63
liferay

digital experience platform · 7.4 · update update64
liferay

digital experience platform · 7.4 · update update65
liferay

digital experience platform · 7.4 · update update66
liferay

digital experience platform · 7.4 · update update67
liferay

digital experience platform · 7.4 · update update68
liferay

digital experience platform · 7.4 · update update69
liferay

digital experience platform · 7.4 · update update7
liferay

digital experience platform · 7.4 · update update70
liferay

digital experience platform · 7.4 · update update71
liferay

digital experience platform · 7.4 · update update72
liferay

digital experience platform · 7.4 · update update73
liferay

digital experience platform · 7.4 · update update74
liferay

digital experience platform · 7.4 · update update75
liferay

digital experience platform · 7.4 · update update76
liferay

digital experience platform · 7.4 · update update77
liferay

digital experience platform · 7.4 · update update78
liferay

digital experience platform · 7.4 · update update79
liferay

digital experience platform · 7.4 · update update8
liferay

digital experience platform · 7.4 · update update80
liferay

digital experience platform · 7.4 · update update81
liferay

digital experience platform · 7.4 · update update82
liferay

digital experience platform · 7.4 · update update83
liferay

digital experience platform · 7.4 · update update84
liferay

digital experience platform · 7.4 · update update85
liferay

digital experience platform · 7.4 · update update86
liferay

digital experience platform · 7.4 · update update87
liferay

digital experience platform · 7.4 · update update88
liferay

digital experience platform · 7.4 · update update89
liferay

digital experience platform · 7.4 · update update9
liferay

digital experience platform · 7.4 · update update90
liferay

digital experience platform · 7.4 · update update91
liferay

digital experience platform · 7.4 · update update92
liferay

digital experience platform · 2023.q4.0
liferay

digital experience platform · 2023.q4.1
liferay

liferay portal · from 7.0.0 (inclusive), before 7.4.3.132 (exclusive)
liferay

Portal · 7.4.0 through 7.4.3.132
Liferay

DXP · 7.3.10 through 7.3.10-u35, 7.4.13 through 7.4.13-u92, 2023.Q3.1 through 2023.Q3.4, 2023.Q4.0
Liferay

Description’s affected range: through 7.4.3.132

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Remote attackers can send malicious data to the Liferay Portal 7.4.0 through 7.4.3.132, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions that will treat it as trusted data via unauthenticated cluster messages. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality and integrity impact as low; availability impact as none.

Published

CWE
CWE-346
CCR priority
26.0 /100 (P4)
CVSS 3.1
6.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · NVD
EPSS
0.00174 · percentile 0.06419 · 2026-10-17
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-62250.html